Groups for shared folders

Gunnar Wrobel wrobel at pardus.de
Thu Jan 22 07:01:20 CET 2009


Quoting Saim Kim <s.kim at hia.rwth-aachen.de>:

> Hi,
>
> I was also looking for a solution for group access -but not to shared
> folders. Instead I would like to grant access to the calendar of
> ressource accounts. I'm still working on a Kolab 2.2.0 system (Debian
> Etch). When I try to enter the group or actually the distribution list
> on the fbview interface it is not added but it shows up in the cyradm
> interface with the "group:" prefix and seems to work right. Will this
> function be added to the fbview webinterface? Actually, there is an
> option to add groups but it is greyed out.

At the current state of planning this will be included. I just checked  
for Kolab-Server-2.2.1-beta-1 and the area is not greyed out anymore.  
But it does not work yet either. I'll have to check this:

https://www.intevation.de/roundup/kolab/issue3365

Cheers,

Gunna

>
> Best regards,
> Saim
>
>
>
>
>
> Alex Kent schrieb:
>> <div class="moz-text-flowed" style="font-family: -moz-fixed">Hi Gunnar,
>>
>> Thanks for your advice on using cyradm for seeing what was going on. I
>> have found a work-around on 2.2.0 so that I'm able to use groups
>> (distribution lists) to set permissions on shared folders.
>>
>> As people have been stating, I didn't need to append 'group:' to the
>> front of the email address used. The system did that for me fine.
>>
>> With the web admin panel configured to give permission for
>> UID/email/GID="staff-group at starfields.net" and  permissions='all':
>>
>> localhost> lam shared.test at starfields.net
>> group:staff-group at starfields.net p
>> manager lrswipkxtecda
>>
>> So clearly, the 'all' permissions weren't getting through to the imap
>> server.
>>
>> So I played with adding permissions manually to the web admin folder:
>>
>> staff-group at starfields.net = "read/post"
>> staff-group at starfields.net = "append"
>> staff-group at starfields.net = "write"
>>
>> And this now results in:
>>
>> localhost> lam shared.test at starfields.net
>> group:staff-group at starfields.net lrswipted
>> manager lrswipkxtecda
>>
>> This allows me to subscribe to the shared mail folder using
>> thunderbird, and add mails to it. I'm guessing I should be able to
>> assign a public email address to it in the normal way.
>>
>> Thanks for everyones help in finding this work-around without me
>> having to compile/upgrade anything!
>>
>> Best wishes,
>>
>> Alex
>>
>>> ------------------------------------------------------------------------
>>>
>>> Subject:
>>> Re: Groups for shared folders
>>> From:
>>> Gunnar Wrobel <wrobel at pardus.de>
>>> Date:
>>> Wed, 14 Jan 2009 16:56:50 +0100
>>> To:
>>> kolab-users at kolab.org
>>>
>>> To:
>>> kolab-users at kolab.org
>>>
>>>
>>> Quoting Alex <lbf at dragonrising.com>:
>>>
>>>> Hi Bernhard,
>>>>
>>>> Thanks so much for the assistance, though I'm still getting stuck.
>>>>
>>>> I've:
>>>>
>>>> 1) Gone to distribution lists and create new list:
>>>>
>>>> List name: staff-group at mydomain.com
>>>> Members: alex.kent at mydomain.com
>>>> Hidden: unchecked
>>>>
>>>> 2) Created a shared folder:
>>>>
>>>> Folder name: staff-shared at mydomain.com
>>>> Folder type: mails
>>>> Permission for UID/email/GID: "group:staff-group at mydomain.com"
>>>> Permission='all'
>>>>
>>>> This generates the error:
>>>>
>>>> "No UID or GID group:staff-group at mydomain.com"
>>>>
>>>> It does accept the UID if I drop "group:" eg:
>>>
>>> Indeed, you don't need the "group:" prefix. The mail address is
>>> enough to identify that this is a group.
>>>
>>> I tested that the whole procedure works fine on the recent
>>> Kolab-Server-2.2.1-beta-1 release but I believe it should also work
>>> on 2.2.0 as I don't think we changed anything in that area.
>>>
>>> Can you check if you see the right permissions on the shared folder
>>> when using the cyradm tool (/kolab/bin/cyradm).
>>>
>>> This is the example session when I tested this:
>>>
>>> /kolab/bin/cyradm -u manager localhost
>>> Password:
>>> example.com> lm
>>> shared.shared at example.com (HasNoChildren)
>>> user/1 at example.com (HasNoChildren)
>>> user/2 at example.com (HasNoChildren)
>>> example.com> lam shared.shared at eample.com
>>> group:group at example.com lrswipteda
>>> anyone lrswipteda
>>> manager lrswipkxtecda
>>>
>>> You see that here the permission is marked with
>>> "group:group at example.com lrswipteda". The "group:" prefix is cyrus
>>> specific. Both users (1 at example.com com and 2 at example.com" are
>>> members of "group at example.com". Both see the shared folder (tested
>>> via the Kolab web client).
>>>
>>> If it still does not work for you I could test the same procedure on
>>> 2.2.0.
>>>
>>> Cheers,
>>>
>>> Gunnar
>>>
>>>> Permission for UID/email/GID: "staff-group at mydomain.com"
>>>> Permission='all'
>>>>
>>>> But this doesn't seem to give me "alex.kent at mydomain.com" access to the
>>>> folder.
>>>>
>>>> Am I getting closer?
>>>>
>>>> Best wishes,
>>>>
>>>> Alex Kent
>>>>
>>>>
>>>>
>>>>
>>>>>
>>>>> ------------------------------------------------------------------------
>>>>>
>>>>>
>>>>> Subject:
>>>>> Re: Groups for shared folders
>>>>> From:
>>>>> Bernhard Reiter <bernhard at intevation.de>
>>>>> Date:
>>>>> Mon, 12 Jan 2009 15:32:56 +0100
>>>>> To:
>>>>> kolab-users at kolab.org
>>>>>
>>>>> To:
>>>>> kolab-users at kolab.org
>>>>>
>>>>>
>>>>> On Sonntag, 11. Januar 2009, Alex wrote:
>>>>>
>>>>>> I'm loving kolab, but need a few pointers giving a group of users
>>>>>> access
>>>>>> to a shared folder. I can at the moment give access to everyone,
>>>>>> nobody
>>>>>> or a specific person.
>>>>>>
>>>>>
>>>>> You can use server distribution lists.
>>>>> (Use the Webadmin for your Kolab Server go to "distribution list",
>>>>> add one with all your users and then use "group:YOURLISTNAME"
>>>>> as UID to give rights to for the folder.
>>>>>
>>>>>
>>>>>> Having searched kolab-users, I've seen a post which seemed to
>>>>>> indicate
>>>>>> the following:
>>>>>>
>>>>>> 1) Create a new user of account type 'Group Account'
>>>>>>
>>>>>> 2) Add users to this group account by adding their UID to the
>>>>>> 'Email-Delegates' field of the group account.
>>>>>>
>>>>>
>>>>> Email-Delegates _only_ is about who can use the From: adress
>>>>> for the Account in question. So this does not help.
>>>>>
>>>>>
>>>>>> 3) Create a shared folder, giving the group accounts UID 'post'
>>>>>> permissions.
>>>>>>
>>>>>
>>>>> Post is about incoming emails, so wrong tree. :)
>>>>>
>>>>>
>>>>>> My Mozilla Thunderbird client does not see the new shared folder.
>>>>>> Am I on the right lines here?
>>>>>>
>>>>>
>>>>> You were'nt. ;)
>>>>>
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> Kolab-users mailing list
>>>> Kolab-users at kolab.org
>>>> https://kolab.org/mailman/listinfo/kolab-users
>>>>
>>
>>
>> </div>
>>
>
>
> --
> --------------------------------------------------------------------------
> Dipl.-Ing. Saim Kim
> Lehrstuhl fuer Medizinische Informationstechnik
> Helmholtz-Institut fuer Biomedizinische Technik
> RWTH Aachen
> Pauwelsstr. 20, D-52074 Aachen
> ---
> Web:   http://www.medit.hia.rwth-aachen.de/
> Tel:   +49-(0)241-80 23218
> Fax:   +49-(0)241-80 82442
> email: s.kim at hia.rwth-aachen.de
> --------------------------------------------------------------------------
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-users at kolab.org
> https://kolab.org/mailman/listinfo/kolab-users
>



-- 
____ http://www.pardus.de _________________ http://gunnarwrobel.de _

E-mail : p at rdus.de                                 Dr. Gunnar Wrobel
Tel.   : +49 700 6245 0000                         Bundesstrasse 29
Fax    : +49 721 1513 52322                        D-20146 Hamburg
--------------------------------------------------------------------
    >> Mail at ease - Rent a kolab groupware server at p at rdus <<
--------------------------------------------------------------------


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.kolab.org/pipermail/users/attachments/20090122/4ae3cdf5/attachment.sig>


More information about the users mailing list